This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          pN4ghT04j5zTe3lEB7yWGrreTGcCSMxjpmVgBxWJn+Y=
Subject key identifier:   06:15:76:CF:39:57:F1:B4:EF:8A:A0:DE:35:ED:CE:9B:B9:63:59:09
Certificate issuer:       /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Certificate serial:       12CF09B900E6669E3AB2851A1935D40DE08E1A82
Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa
Signing time:             Wed 26 Nov 2025 04:03:47 +0000
ROA not before:           Wed 26 Nov 2025 03:58:47 +0000
ROA not after:            Wed 25 Nov 2026 04:03:47 +0000
asID:                     4800
IP address blocks:        103.183.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl
                          rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 21:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cf:09:b9:00:e6:66:9e:3a:b2:85:1a:19:35:d4:0d:e0:8e:1a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
        Validity
            Not Before: Nov 26 03:58:47 2025 GMT
            Not After : Nov 25 04:03:47 2026 GMT
        Subject: CN=061576CF3957F1B4EF8AA0DE35EDCE9BB9635909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:58:3f:24:78:83:5d:53:53:ef:91:b4:f4:
                    3c:15:d8:84:e7:78:e4:8e:3c:a7:a1:0a:32:75:13:
                    36:68:d5:fd:51:ab:de:b6:0c:22:54:77:e0:94:a4:
                    ca:ca:98:0b:ca:09:19:40:09:f2:d1:52:06:b2:a1:
                    71:10:95:71:4a:f5:cf:ab:06:75:c2:9f:91:90:65:
                    a5:03:d0:a5:74:70:2a:1e:36:99:cd:85:a2:4d:59:
                    13:9e:7d:2d:39:1b:d8:55:72:41:ed:60:12:d0:e7:
                    37:95:44:7d:c3:5a:b6:38:03:8c:42:82:75:64:30:
                    81:3b:bf:02:3d:dd:c8:c3:62:c3:8e:4c:87:69:74:
                    8c:a6:f9:9e:13:e4:5c:0c:35:f2:2f:d9:83:25:1c:
                    93:4d:56:30:3b:aa:08:70:35:89:dd:47:c9:16:e9:
                    c6:f0:e4:f6:7c:10:55:d9:c2:fc:15:30:2e:33:4f:
                    84:38:2f:53:c0:57:c7:eb:18:60:cb:df:e6:89:35:
                    35:f0:7c:25:47:33:d4:10:f9:7b:8f:2d:af:29:6b:
                    7a:69:26:6d:15:af:2a:f2:5a:72:75:16:a0:43:42:
                    2a:62:7a:54:21:a3:7f:e9:71:af:65:4c:fd:a6:f7:
                    d8:6a:e3:ba:2e:f7:9a:75:c7:f2:dc:1c:cd:af:c2:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:15:76:CF:39:57:F1:B4:EF:8A:A0:DE:35:ED:CE:9B:B9:63:59:09
            X509v3 Authority Key Identifier:
                keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:ba:2c:d2:10:d7:20:18:1c:bc:17:db:2c:c5:c8:33:1f:65:
         67:98:12:41:81:19:b5:5b:32:e9:cc:d0:39:30:57:2c:b7:0a:
         36:67:cf:b4:81:88:c2:c7:ab:4c:df:55:13:68:dd:0a:09:78:
         5e:8a:31:e9:76:a8:b2:02:04:25:a9:20:68:76:12:de:cb:ea:
         a3:d2:bd:3a:4f:3d:76:77:13:fc:86:05:b0:0d:b3:af:b3:d5:
         c9:df:83:93:f6:67:f4:9a:b4:a1:83:3b:b1:d7:fd:b7:aa:1f:
         c8:f7:ec:d0:13:f4:df:25:5a:6e:2b:db:a5:e5:e0:2d:5f:86:
         1a:30:6e:38:dd:a7:7f:d3:ed:e8:c6:92:92:8b:e1:96:20:aa:
         97:0c:d3:7d:86:18:ea:c6:95:75:26:c5:d3:a3:b0:16:30:13:
         6f:f5:51:41:ef:8f:83:4c:3c:ee:7a:a1:4f:ce:7b:d3:76:80:
         b6:62:26:14:b8:a9:39:bc:a8:69:94:20:f2:ab:ba:f9:c4:c5:
         62:e8:b3:83:b5:1b:3e:9d:c9:01:08:28:7b:23:55:66:f8:68:
         b4:86:f9:9e:2c:6e:3d:1d:6a:cb:17:b2:cd:23:67:1e:46:38:
         fd:e5:5c:f0:e1:c9:79:5c:f8:94:03:45:89:b8:99:85:2e:b2:
         9f:91:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:14:43 2025 by rpki-client